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This paper describes a new message passing protocol that provides guaranteed detection of 
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A first-order multiparty interaction is an abstraction mechanism that defines communication 
among a set of formal process roles. Actual processes participate in a first-order interaction 
by enroling into roles, and execution of the interaction can proceed when all roles are filled 
by distinct processes. As in CSP, enrolement statements can serve as guards in alternative 
commands. The enrolement guard-scheduling problem then ... 
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We study protocols for strong authentication and key exchange in asymmetric scenarios 
where the authentication server possesses ~a pair of private and public keys while the client 
has only a weak human-memorizable password as its authentication key. We present and 
analyze several simple password authentication protocols in this scenario, and show that the 
security of these protocols can be formally proven based on standard cryptographic 
assumptions. Remarkably, our analysis shows optimal re ... 
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This paper introduces a new distributed data object called Resource Controller that provides 
an abstraction for managing the consumption of a global resource in a distributed system. 
Examples of resources that may be managed by such an object include; number of 
messages sent, number of nodes participating in the protocol, and total CPU time consumed. 
The Resource Controller object is accessed through a procedure that can be invoked at any 
node in the network. Before consuming a u ... 
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Techniques that support effective communication during teamwork processes are of 
particular importance. Psychological study shows that an effective team often can anticipate 
information exchange among the team and communicate relevant information proactively. 
Proactive communication is crucial for understanding and sharing common goals and for 
cooperative actions. Communication can be valuable if it assists agents with new and timely 
information; it also has cost because it consumes network reso ... 
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We propose a formal semantics for the protocol diagrams (interaction patterns) of AUML 
(Agent Unified Modelling Language). We connect this proposal with a general framework for 
defining the semantics of ACLs (Agent Communication Languages). We then show that 
protocol diagrams should be parameterised with observable commitments: additional 
specification of the expected outcomes and normative positions resulting from the use of the 
protocol. A complete axiomatisation of a contract-net protoco ... 
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In a large modern enterprise, information is almost inevitably distributed among several 
database management systems. Despite considerable attention from the research 
community, relatively few commercial systems have attempted to address this issue. This 
paper describes new technology that enables clients of IBM's DB2 Universal Database to 
access the data and specialized computational capabilities of a wide range of non-relational 
data sources. This technology, based on the Garlic prototype deve ... 
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This paper is concerned with the development of a language/action perspective in the 
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Cosmos project. We emphasize the importance of seeing cooperative work in terms of 
participants' communicative actions. In contrast to some explorations of speech act theory, 
we argue that communicative actions should be seen as essentially embedded in dialogical 
contexts. In particular, we attempt to show the relevance of concepts derived from the 
analysis of actually occurring conversations, for computer ... 
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terms 

The goal of our work is to use the paradigms of syntax-directed editing to perform very 
sophisticated semantic checking, for example, to check flow-sensitive properties such as 
whether a variable is necessarily defined before it is used. Semantic checking of this power 
is much more important than syntax checking because it relieves the programmer of the 
need to keep track of numerous details as the program grows in complexity. There has been 
a great deal of recent work on syntax- ... 
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This paper is the reply to the paper "Erhard Konrad: Application of Measurement Theory to 
Software Metrics - Comments on the Bollmann-Zuse Approach" which is also published in 
this issue (November 92) of SIGPLAN Notices. Konrad is criticizing our approach: "Horst 
Zuse; Peter Bollmann: Using Measurement Theory to Describe the Properties and Scales of 
Software Complexity Metrics", which was published in SIGPLAN Notices (8)89. Konrad 
criticized the first time our paper in SIGPLAN Notices in March 1 ... 
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Pawel Gburzynski, Jacek Maitan 

February 2004 ACM Transactions on Internet Technology (TOIT), Volume 4 issue l 

Full text available: pdf(162.34 KB) Additional Information: full citation , abstract , references , index terms 

We present an effective method of eliminating unsolicited electronic mail (so-called spam) 
and discuss its publicly accessible prototype implementation. A subscriber to our system is 
able to obtain an unlimited number of aliases of his/her permanent (protected) E-Mail 
address to be handed out to parties willing to communicate with the subscriber. It is also 
possible to set up publishable aliases, which can be used by human correspondents to 
contact the subscriber, while being useless to h ... 

Keywords: Electronic mail, privacy, spam 
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Our growing reliance on online services accessible on the Internet demands highly available 
systems that provide correct service without interruptions. Software bugs, operator 
mistakes, and malicious attacks are a major cause of service interruptions and they can 
cause arbitrary behavior, that is, Byzantine faults. This article describes a new replication 
algorithm, BFT, that can be used to build highly available systems that tolerate Byzantine 
faults. BFT can be used in practice to implement re ... 
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We describe a new method for protecting the anonymity of message receivers in an 
untrusted network. Surprisingly, existing methods fail to provide the required level of 
anonymity for receivers (although those methods do protect sender anonymity). Our 
method relies on the use of multicast, along with a novel cryptographic primitive that we call 
an Incomparable Public Key cryptosystem, which allows a receiver to efficiently create many 
anonymous "identities" for itself without divulging that these ... 
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Distributed operating systems have many aspects in common with centralized ones, but 
they also differ in certain ways. This paper is intended as an introduction to distributed 
operating systems, and especially to current university research about them. After a 
discussion of what constitutes a distributed operating system and how it is distinguished 
from a computer network, various key design issues are discussed. Then several examples 
of current research projects are examined in some detail ... 
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PARLOG is a logic programming language in the sense that nearly every definition and query 
can be read as a sentence of predicate logic. It differs from PROLOG in incorporating parallel 
modes of evaluation. For reasons of efficient implementation, it distinguishes and separates 
and-parallel and or-parallel evaluation. PARLOG relations are divided into two types: single- 
solution relations and all-solutions relations. A conjunction of single-solution relation calls 
can be evaluated ... 
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The design and correctness of a communication facility for a distributed computer system 
are reported on. The facility provides support for fault-tolerant process groups in the form of 
a family of reliable multicast protocols that can be used in both local- and wide-area 
networks. These protocols attain high levels of concurrency, while respecting application- 
specific delivery ordering constraints, and have varying cost and performance that depend 
on the degree of ordering ... 
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